Evidence · Q2-EV-032

Salesforce (Sales + Financial Services Cloud) · configuration report (Q2)

RejectedConfiguration reportCollected 19 Jun 2026

Requirement to validation

Requirement
ISO-A.5.19 · ISO-A.5.22 · RBI-OITS-2023-6 · RBI-OITS-2023-9 · SOC2-CC9.2
mapped
Policy
Vendor & IT Outsourcing Risk Policy
pol-vendor
Control
VEN-01
Critical third parties are risk-assessed before onboarding and annually
Application
PayGate Payment Gateway · Salesforce (Sales + Financial Services Cloud)
mapped
Evidence · Q3
3 items
2 approved · 1 pending · 0 rejected
Test · Q3
Fail
TST-RBI-VEN-01 · Medium confidence
Finding
F-RBI-02 · Medium
Open
Action
Sanjay Kulkarni
REM-F-RBI-02 · Open
Validation
Pending
as recorded

Record

Control
VEN-01 · Critical third parties are risk-assessed before onboarding and annually
Source system
Salesforce (Sales + Financial Services Cloud)
Cycle
Q2 2026 Unified Program Review
Review note
Did not cover the full quarter; superseded by the exception noted.
Provenance
Q2 2026 internal audit baseline workpaper (staged)